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28 December 1949 




MEMORANDUM FOR: Mr. Friedman 

Subject: Theoretical Security of the " Schlusselkasten" . 



1. The security of the Schlussenkasten appears to be fair- 
ly high, but I believe that when used in low echelon with a 
moderate amount of traffic the system will not offer the security 
required at that level. There follows a brief analysis of the 
system. 



2. The Germans believed that the theoretical security of 
the Schlussenkasten was equivalent to or greater than the 
Enigma. Some of the weaknesses, however, which appear to 
negate the opinion of the Germans are made use of in the 
analysis. 
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4. Recovery of the two alphabets presents the most 
trouble. Cribs and direct depths as well as isomorphs will 
be the data required. Cribs can be placed since a letter cann! 
represent itself. As reconstruction progresses additional 
limitations can be used to place cribs. 
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a. The reconstruction of the machine can be 
accomplished, I think, in three steps: (1) Determining the 
limitations present in each of the two alphabets, i.e., like 
and unlike substitution values in the upper and lower alphabet^; 
(2) Recovery of the alphabets; and (3) Recovery of the pin 
wheel patterns. E0 3 . 3 (h)( 2 ) 
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c. Once the separation is determined the portions 
of matched plain and cipher text can be divided into three 
categories - (1) upper alphabet; (2) lower alphabet; and 

(3) ambiguous. Direct depths and isomorphic depths should 
help and recovery will be along the usual lines. 

d. When the two alphabets are recovered the internal 
the slide has moved between letters is readily determined from 
the matched plain and cipher. Since the wheels move regularly, 
placement of active and inactive fins is relatively simple. 

As long a crib as possible is desirable, otherwise short cribs 
may not produce enough pin patterns to permit joining the 
stepping cycle in relative order. With alphabets recovered, 
however, and knowing the average interval is about 4, cribs 
probably can be extended. 



e. Isomorphic depths can be helpful in separating 
the two alphabets and in recovery. The isomorphisms are not 
[ as easily recognized as in normal cases since the relation 
U exists as two interlaced isomorphs, each behaving as in the 
:L normal case. With sufficient material It seems probable that 

the isomorphic feature alone might well lead to a complete solution. 
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